Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e392e33332e302f32342d3234203d3e20313336373837.roa
File: 3139332e392e33332e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: oQ0VdONZc9bnYogxHnm7bQaEEf/600gOT21HNX+z700=
Subject key identifier: 03:AB:71:E6:BC:54:D2:47:E7:23:FA:EB:7F:5C:1B:3C:AC:DF:0A:F5
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 69646E6CBDADB337C5B1980DEB2C5861A7374B87
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e392e33332e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 26 Jan 2024 19:02:25 +0000
ROA not before: Fri 26 Jan 2024 18:57:25 +0000
ROA not after: Fri 24 Jan 2025 19:02:25 +0000
asID: 136787
IP address blocks: 193.9.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 16:07:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:64:6e:6c:bd:ad:b3:37:c5:b1:98:0d:eb:2c:58:61:a7:37:4b:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 26 18:57:25 2024 GMT
Not After : Jan 24 19:02:25 2025 GMT
Subject: CN=03AB71E6BC54D247E723FAEB7F5C1B3CACDF0AF5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6a:6b:8c:10:02:f4:16:76:d6:f8:b4:a2:b6:
7b:93:96:69:56:3e:6c:78:55:31:12:f0:bc:bd:a0:
16:80:d2:a2:f6:18:09:28:14:67:3c:68:be:37:82:
f7:83:76:f8:57:ba:44:20:19:15:91:6b:22:31:cd:
ab:05:8c:10:e4:d0:81:46:5c:20:91:d7:b8:60:cf:
6c:64:58:b1:79:c8:ce:a3:a3:82:f4:b5:cb:b0:97:
15:e4:eb:ca:6d:a9:ad:31:90:b3:00:71:58:f5:e3:
e2:51:d8:c7:08:b7:cc:40:5d:f6:02:9b:23:55:46:
48:62:19:7a:b3:20:bf:7f:a9:42:9b:fd:c1:c8:75:
db:36:58:66:e3:69:53:08:80:dc:6f:71:65:7d:5b:
74:19:cb:61:29:5d:6b:de:56:ca:07:66:ac:ae:84:
66:89:31:03:18:d1:d6:19:10:cf:09:81:18:b8:09:
0e:f4:93:71:8d:be:ad:7f:a0:64:f6:a1:a7:0b:5e:
45:9e:1b:70:32:c9:03:29:f3:34:12:38:b6:34:c3:
23:34:0c:15:03:a4:cd:85:04:e7:f2:f8:0f:f1:c0:
70:c4:90:2d:ab:8b:ef:43:e9:be:d0:c0:1a:6a:e4:
a3:76:e3:6b:b8:ec:7b:1a:6f:07:84:5a:50:86:16:
e8:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:AB:71:E6:BC:54:D2:47:E7:23:FA:EB:7F:5C:1B:3C:AC:DF:0A:F5
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e392e33332e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.9.33.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:0c:27:61:65:d5:f9:16:72:22:17:4f:69:dc:e7:f7:6d:4f:
c8:37:e2:5a:93:34:07:b0:71:8d:33:0c:f0:09:2c:44:a4:ad:
f7:6f:87:01:73:18:ad:15:31:49:59:4d:38:d8:07:4a:62:ef:
2f:65:be:91:82:b0:d8:4e:44:b2:ff:61:5b:ab:16:e8:29:2d:
3e:aa:49:34:32:39:57:3e:75:82:7c:87:51:ab:d2:14:ec:74:
d9:1d:44:74:0f:1b:1c:c4:2a:9a:b2:e4:f2:31:18:e5:0d:d8:
bf:b4:13:52:29:6c:0a:e9:c3:0c:b3:1d:d7:ad:96:a1:5b:7a:
e8:ad:51:74:b7:ea:8c:f1:5a:12:69:30:a2:be:8e:6f:89:75:
7d:ac:be:a8:4d:dd:05:cf:1d:52:5f:90:f2:46:72:3f:ec:4f:
46:b7:3f:dc:01:97:7c:f4:8d:21:77:b4:e9:cf:e3:48:f9:53:
55:30:db:b2:74:98:60:72:c5:4d:fc:b1:bb:46:8f:99:31:6c:
ef:24:d1:49:50:83:64:1b:97:6b:90:87:2e:79:71:30:df:bc:
09:15:01:9d:61:a9:cf:15:83:2d:be:2a:3a:eb:b4:a5:e4:f5:
b6:2e:10:a7:2c:32:5a:de:1d:61:dd:c7:67:0f:77:99:3e:b6:
f9:99:fe:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 19:21:53 2024 by rpki-client on console-ams.rpki-client.org